Privacy Policy

On this page we inform you about our privacy policy (I) and our social media privacy policy (II).

I Data protection information

It is generally possible to use our website without providing personal data. With this information, we inform you about what data we collect from you, how we use it and how you can object to the use of your data.


Who is responsible for data collection and processing?

DB Regio Bus Ost GmbH NL City Circle collects and processes your data as the controller.
If you have any questions or suggestions about www.https://city-circle-potsdam.de, please contact

DB Regio Bus Ost GmbH NL City Circle
Mannheimer Straße 33/34
10713 Berlin-Wilmersdorf

Telephone: +49(0)30 860 960
E-mail: citycircle@deutschebahn.com

The appointed data protection officer of DB Regio Bus Ost GmbH NL City Circle is Dr Marein Elena Müller.

If you have any questions or suggestions regarding data protection, please send an e-mail to konzerndatenschutz@deutschebahn.com.


What data do we collect and how and why do we process your data?

When you visit this website, certain device-related data is automatically collected and processed. This is the so-called server log files that are typically generated when you visit a website.

The following data is usually transmitted to us

- IP address
- Date and time of your enquiry
- Time zone difference to Greenwich Mean Time (GMT)
- Content of your request
- Access status/HTTP status code
- Amount of data transferred
- Website (from which the request comes)
- browser
- Operating system and its interface
- Language and version of the browser software

It is not technically possible to use this website without processing this data.
The legal basis for the processing is Art. 6 para. 1 lit. f GDPR.


When you contact us, we process the personal data you provide to process the correspondence. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR.


Insofar as we obtain your consent for the processing of personal data, this serves as the legal basis in accordance with Article 6(1)(a) GDPR.


When processing personal data that is required to fulfil a contract with you, the contract is the legal basis in accordance with Article 6(1)(b) GDPR. Article 6(1)(b) GDPR also applies to processing operations that are necessary for the performance of pre-contractual measures, for example in the case of enquiries about our products or services or in the case of job applications.
If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.


If you assert passenger rights with us, we collect the data on the journey, your name and address, if applicable, for our internal accounting. In the event that you request a bank transfer, we collect your account details for the purpose of payment to you. The legal basis for this processing is Art. 6 para. 1 lit. b GDPR.


How long will your data be stored?

We only store your data for as long as it is necessary to fulfil the purpose for which it was collected or if this is required by law.


What rights do users of www.citycircle.de have?

- You can request information about what data is stored about you.
- You can request the correction, deletion and restriction of the processing (blocking) of your personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship.
- You have the right to lodge a complaint with a supervisory authority.
The supervisory authority responsible for DB Regio Bus Ost GmbH NL City Circle is

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
Entrance: Alt-Moabit 60

- You have the right to the portability of the data that you have provided to us on the basis of consent or a contract (data portability).
- If you have given us your consent to process your data, you can withdraw it at any time by the same means by which you gave it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

- You may object to data processing on grounds relating to your particular situation if the data processing is based on our legitimate interests.
- You can object to being contacted for advertising purposes at any time with effect for the future (objection to advertising).

To exercise your rights, simply send a letter by post to:

DB Regio Bus Ost GmbH NL City Circle

or by e-mail to citycircle@deutschebahn.com.


Is data passed on?

In order to process the contract, it is usually necessary to involve processors who are dependent on instructions, such as computer centre operators, printing or shipping service providers or other parties involved in the fulfilment of the contract.
External service providers who process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work in accordance with our instructions, which is ensured by strict contractual regulations, technical and organisational measures and supplementary controls. The involvement of service providers is necessary, for example, as part of the administration and maintenance of IT systems.

Otherwise, your data will only be transferred if you have given us your express consent or on the basis of a legal regulation.

A transfer of data may be necessary in the following constellations, for example:

- Credit check when registering for the direct debit procedure by a service provider for credit checks.
- In the event of payment irregularities/defaults, claims data may be passed on to a debt collection agency.
- If you assert your passenger rights, these will be processed by DB Regio Bus Ost GmbH NL City Circle. DB Regio Bus Ost GmbH NL City Circle participates in a dispute resolution procedure before a consumer arbitration board. The competent consumer arbitration board is: söp Schlichtungsstelle für den öffentlichen Personenverkehr e. V. It can be contacted at the following address: Fasanenstraße 81, 10623 Berlin, Web: soep-online.de.


Use of cookies

Cookies are small text files in which data can be stored on your end device. We only use one technically necessary cookie on our website, which is absolutely essential for the technical functions of the website. This is a cookie to maintain the user session (cookie name: PHPSESSID). This cookie is deleted when the browser is closed.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.


Use of Google Maps

On our websites, we use the map service Google Maps from Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to display timetables and visualise locations. To display the maps, we transmit your IP address to Google.

The legal basis for this is Art. 6 para. 1 lit. b) GDPR.

- The relevant privacy policy.
- Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield.
- Here you can make settings for data protection to the desired extent.


Use of an external merchandise management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected as part of the order is transmitted to Palisis AG, Seestr. 25, CH-8702 Zollikon. We have concluded a contract with Palisis AG for the processing of personal data on behalf of Palisis AG in accordance with Art. 28 GDPR.


Payment provider

PayPal

We offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
If you select payment via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the fulfilment of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

What happens with links to external sites?

When you click on a link to an external site, you are moving outside the pages of www.citycircle.de. DB Regio Bus Ost GmbH NL City Circle is therefore not responsible for the content, services or products offered on the linked website or for the data protection and technical security of the linked website.


Video surveillance

Why do we process your data?

The purposes of video surveillance are:

a) in the vehicle:

- Exercise of domiciliary rights
- Investigation and prevention of criminal offences
- Protection of life, health and freedom of employees and customers
- Preservation of evidence in the event of an incident
- Prosecution of criminal offences
- Protection of property and possessions

The legal basis for the processing is Art. 6 para. 1 lit. f) GDPR in conjunction with § SECTION 4 BDSG.

Legitimate interests are the investigation and prevention of criminal offences and the protection of life, health and freedom of employees and customers, as well as the preservation of evidence in the event of an incident.

In the case of video surveillance of vehicles and publicly accessible large-scale facilities of public rail, ship and bus transport, the protection of life, health or freedom of persons present there is considered a particularly important interest.

b) in the property:

- Exercise of domiciliary rights
- Investigation and prevention of criminal offences
- Protecting the life, health and freedom of employees and customers
- Preservation of evidence in the event of an incident
- Prosecution of criminal offences
- Protection of property and possessions
- Proper implementation of operating procedures, monitoring of functionality and technical system control, troubleshooting

The legal basis for processing is Art. 6 para. 1 lit. f) GDPR.

Is the data passed on?

Data is passed on to investigating authorities, in particular the state and federal police, as required. In special individual cases, data is passed on to the Federal Railway Authority.

How long will your data be stored?

Vehicles: the data is not stored.

Objects: the storage period is 72 hours. At the end of this period, the data is automatically deleted.

What rights do data subjects have?

- You can request information about what data is stored about you.
- You can request the correction, deletion and restriction of the processing (blocking) of your personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship.
- You have the right to lodge a complaint with any data protection supervisory authority.
- You can object to data processing for reasons arising from your particular situation
if the data processing is based on our legitimate interests or is necessary for the performance of a public task.

To exercise your rights, simply write to the above-mentioned office.


Updating the data protection notice

We adapt the data protection notice to changed functionalities or changed legal situations. We therefore recommend that you take note of the data protection notice at regular intervals.


II Social media data protection notice


This notice informs you which data we collect from you, how we use it and how you can object to the use of your data.

Who is responsible for data collection and processing?

DB Regio Bus Ost GmbH NL City Circle collects and processes your data as the controller.

If you have any questions or suggestions about this website, please contact

DB Regio Bus Ost GmbH NL City Circle
Mannheimer Street 33/34
10713 Berlin - Wilmersdorf
Telephone: (030) 860 960
E-Mail: citycircle@deutschebahn.com

The appointed data protection officer is Dr Marein Elena Müller.

If you have any questions or suggestions regarding data protection, please send an e-mail to: konzerndatenschutz@deutschebahn.com.


What data do we collect and how and why do we process your data?

You can find us on social media (Facebook) with our own presence. Our social media activities, which are described in more detail below, are carried out on the basis of Article 6(1)(f) GDPR. With these activities, we would like to provide you with a broad, multimedia offer and exchange information with you on topics that are important to you.

The respective data processing purposes and data categories can be found in the respective offer listed in more detail below.

Facebook
Facebook offers extensive opportunities for interaction and multimedia presentation. On the Facebook page of DB Regio Bus Ost GmbH NL City Circle you will find tips and information on all aspects of bus charter and sightseeing. If you visit our fan page, Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, collects, stores and processes your personal data in accordance with its privacy policy. You can find the privacy policy here: https://www.facebook.com/policy.php.

Beyond this, we only process data to a very limited extent:

The social management tool "SocialHub" may be used to process comments and questions. The data imported there (comments, usernames) will be completely deleted after 12 months.

We also store usernames and comments that are deleted due to a breach of netiquette. These will only be retained within the limitation period to provide any necessary evidence in the event of legal disputes.

Data is collected for the purpose of organising competitions. Details on this, such as which data is collected and for what purpose, can be found in the data protection information and conditions of participation for the respective competition.

We use the "Facebook Insights" statistics service for the purpose of designing and continuously optimising our pages to meet your needs. The Facebook Insights data is analysed anonymously so that no conclusions can be drawn about individual users. Access to individual user profiles by the administrator is not possible.

The data collected by Facebook Insights are
- Page activities
- Page views
- Post reach (differentiation between organic/paid content)
- Recommendations
- Post interactions
- Video: Views and average video playback
- Location (country, city)
- Target group (gender ratio, age, language)


Is data passed on?

In order to process the contract, it is generally necessary to involve processors who are dependent on instructions, such as computer centre operators, printing or shipping service providers or other parties involved in the fulfilment of the contract.

External service providers who process data on our behalf are carefully selected by us and strictly bound by contract. The service providers work in accordance with our instructions, which is ensured by strict contractual regulations, technical and organisational measures and additional controls.

Otherwise, your data will only be transferred if you have given us your express consent or on the basis of a legal regulation. We would like to point out that user data may be processed outside the European Union when data is processed by the above-mentioned social networks. This may result in risks for users because, for example, the enforcement of users' rights could be made more difficult. For details, please refer to the privacy policy of the respective social network.
We do not transfer data to third countries outside the EU/EEA or to an international organisation unless appropriate safeguards are in place. These include the EU standard contractual clauses and an adequacy decision by the EU Commission.


How long will your data be stored?

If we have collected personal data from you, we will only store it for as long as it is necessary to fulfil the purpose for which it was collected (e.g. as part of a contractual relationship) or if this is required by law. In the context of a contractual relationship, we store your data at least until the contract is fully terminated. The data will then be stored for the duration of the statutory retention periods.


What rights do users have?

- You can request information about what data is stored about you.
- You can request the correction, deletion and restriction of the processing (blocking) of your personal data as long as this is legally permissible and possible within the framework of an existing contractual relationship.
- You have the right to lodge a complaint with a supervisory authority.
- You have the right to the portability of data that you have provided to us on the basis of consent or a contract (data portability).
- If you have given us your consent to process your data, you can withdraw this at any time using the same method you used to give it. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- You may object to data processing on grounds relating to your particular situation if the data processing is based on our legitimate interests.
- You can object to being contacted for advertising purposes at any time with effect for the future (objection to advertising).

To exercise your rights, simply send a letter by post to:
DB Regio Bus Ost GmbH NL City Circle
Mannheimer Straße 33/34
10713 Berlin - Wilmersdorf
or by email to citycircle@deutschebahn.com

With regard to data processing on social networks, we recommend that you contact the respective social network directly in the event of requests for information or other questions about user rights, such as a deletion request, as only the respective social network has full access to your user data. If you no longer wish the data processing described here to take place in future, you can use the "I no longer like this page" and/or "No longer subscribe to this page" functions to remove the link between your user profile and our respective page.


How up-to-date is this data protection notice?

We adapt the data protection notice to changed functionalities or changed legal situations. We therefore recommend that you take note of the data protection notice at regular intervals. If your consent is required or components of the data protection notice contain provisions of the contractual relationship with you, the changes will only be made with your consent.

Status: January 2023